fix(deps): update all non-major dependencies #36

Open
renovatebot wants to merge 1 commit from renovate/all-minor-patch into main
Member

This PR contains the following updates:

Package Type Update Change
org.apache.maven.plugins:maven-shade-plugin (source) build patch 3.6.13.6.2
org.graalvm.buildtools:native-maven-plugin build patch 0.11.30.11.5
org.apache.maven.plugins:maven-resources-plugin (source) build minor 3.4.03.5.0
org.apache.maven.plugins:maven-failsafe-plugin (source) build patch 3.5.43.5.5
org.apache.maven.plugins:maven-compiler-plugin (source) build minor 3.14.13.15.0
com.github.loki4j:loki-logback-appender compile patch 2.0.12.0.3
org.owasp:dependency-check-maven (source) build minor 12.1.912.2.0
com.puppycrawl.tools:checkstyle (source) build minor 12.2.012.3.1
org.springframework.cloud:spring-cloud-dependencies (source) import minor 2025.0.02025.1.1
org.springframework.boot:spring-boot-maven-plugin (source) build patch 3.5.83.5.11
org.springframework.boot:spring-boot-dependencies (source) import patch 3.5.83.5.11
org.jetbrains.kotlin:kotlin-maven-plugin (source) build minor 2.2.212.3.10

Release Notes

graalvm/native-build-tools (org.graalvm.buildtools:native-maven-plugin)

v0.11.5

Compare Source

What's Changed

Full Changelog: https://github.com/graalvm/native-build-tools/compare/0.11.4...0.11.5

v0.11.4

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/graalvm/native-build-tools/compare/0.11.3...0.11.4

loki4j/loki-logback-appender (com.github.loki4j:loki-logback-appender)

v2.0.3

Compare Source

Bug fixes

#​330 Security: Upgrade logback-classic to 1.5.25 (by @​novakma2)

Misc

#​331 Dependencies upgraded
#​332 Switch integration test from Loki 3.5.4 to Loki 3.6.4

v2.0.2

Compare Source

Bug fixes

#​325 Add UTF-8 encoding support to RawJsonString

dependency-check/DependencyCheck (org.owasp:dependency-check-maven)

v12.2.0

Compare Source

  • feat: package and utilize generated suppression file (#​8116)

  • feat: override pnpm audit registry parameter (#​8158)

  • feat: support multiple cvssBelow thresholds per version (#​2563) (#​8024)

  • feat: usage telemetry via scarf (#​8066)

  • feat: add new suppression xsd allowing grouping of suppressions (#​7957)

  • fix(ant): resolve relative paths against basedir (#​8202)

  • fix: add hint for Elastic APM Java agent CPE mapping (#​8200)

  • fix: Allow NVD data feed metadata downloads to fail on 1st Jan while logging correct errors (#​8205)

  • fix(ant): resolve paths relative to basedir for suppression and output

  • fix: correct XML/JSON report CVSS field & HTML report URL mappings (#​8156)

  • fix: log GrokAssembly output when dotnet invocation fails (#​8141)

  • fix: correct reliability of Central etc (JCS cache) analyzers on Java 25/Docker by making CLI classpath deterministic (#​8117)

  • docs: Update & correct README (#​8166)

  • docs: update suppression schema version (#​8136)

  • docs: fix typos in some files (#​8135)

  • chore: remove duplicate suppression rules from base that are in the generated branch (#​8138)

  • chore: remove suppression rules that were deleted from the generatedSuppression branch (#​8119)

  • build: transition dependency to org.eclipse.parsson groupId (#​8128)

  • See the full listing of changes

spring-cloud/spring-cloud-release (org.springframework.cloud:spring-cloud-dependencies)

v2025.1.1

Compare Source

What's Changed

Full Changelog: https://github.com/spring-cloud/spring-cloud-release/compare/v2025.1.0...v2025.1.1

v2025.1.0

Compare Source

v2025.0.1

Compare Source

spring-projects/spring-boot (org.springframework.boot:spring-boot-maven-plugin)

v3.5.11

Compare Source

🐞 Bug Fixes
  • Whitespace can be incorrectly removed when spring-boot-configuration-processor runs on multi-line javadoc #​49039
  • server.jetty.threads.max is ignored when using virtual threads #​48982
  • Docker credential helpers with file extensions cannot be executed on Windows #​48965
📔 Documentation
  • Couchbase and Kafka are incorrectly listed as supporting SSL with Docker Compose #​49211
  • Document that use of non idiomatic format for '@Value' still apply for environment variables #​49054
  • Document naming convention for custom test-scoped starters #​49014
  • LICENSE.txt and NOTICE.txt files have the wrong content in the latest releases #​48996
  • ApplicationContextAssert documents a non-existent assertion in getFailure() #​48973
  • Highlight the importance of the preStop hook when configuring Kubernetes probes #​48936
🔨 Dependency Upgrades
❤️ Contributors

Thank you to all the contributors who worked on this release:

@​dsyer, @​linkian209, @​nosan, @​quaff, @​scordio, and @​srt

v3.5.10

Compare Source

🐞 Bug Fixes
  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #​48836
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #​48835
  • Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #​48810
  • DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #​48702
  • Application JAR created by extract command is not reproductible #​48664
  • AOT processing of tests should not be disabled when 'skipTests' is set #​48661
  • Fix zero-length byte buffer in InspectedContent #​48649
📔 Documentation
  • Update documentation for Buildpack's AOT Cache support #​48768
  • Document support for configuring arguments passed to Docker Compose #​48657
  • Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #​48634
  • Fix grammar and typos in the reference guide #​48596
🔨 Dependency Upgrades
❤️ Contributors

Thank you to all the contributors who worked on this release:

@​GaoSSR, @​izeye, and @​ngocnhan-tran1996

v3.5.9

Compare Source

🐞 Bug Fixes
  • RabbitHealthIndicator reports an error when version is missing from the connection's server properties #​48486
  • Profiles retained during AOT processing are not configured in a native image #​48475
  • NullPointerException in UndertowWebServer.destroy() when using @DirtiesContext and Citrus Spring Boot Simulator #​48450
  • Redis health check reports an error when redis_version is missing from the INFO response #​48326
  • Parent's MeterRegistry beans are closed when child context closes #​48324
  • SpringBootTest.UseMainMethod.WHEN_AVAILABLE and ALWAYS are incompatible with package-private or parameter-less main method #​48271
📔 Documentation
  • Documentation has an outdated reference to the Jackson Kotlin Module #​48533
  • Caching documentation should clarify how to use a no-op implementation to run a test suite #​48531
  • Document that the default rolling policy for Log4j2 requires logging.file.path to be set #​48526
  • License header in build samples is displayed in the reference documentation #​48477
  • Configuring Two DataSources How-To code sample is inconsistent #​48448
  • Improve javadoc for when to use class names rather than class references #​48395
  • Document that org.aspectj.weaver.Advice must be on the classpath to enable support for Micrometer's annotations #​48359
  • Polish TestRestTemplate examples in the reference guide #​48335
  • Fix links to javadoc in the reference documentation #​48299
  • Clarify that @EnableBatchProcessing turns off all batch auto-configuration, including schema initialization #​48265
  • Kotlin auto-configuration examples are not annotated with @AutoConfiguration #​48227
  • Infinispan Cache Documentation is outdated #​48217
  • Revise "Use Liquibase for test-only migrations" section in reference manual #​48169
🔨 Dependency Upgrades
❤️ Contributors

Thank you to all the contributors who worked on this release:

@​banseok1216, @​berry120, @​dmitrysulman, @​geopark021, @​noojung, @​scottfrederick, @​vpavic, and @​youngledo


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [org.apache.maven.plugins:maven-shade-plugin](https://maven.apache.org/plugins/) ([source](https://github.com/apache/maven-shade-plugin)) | build | patch | `3.6.1` → `3.6.2` | | [org.graalvm.buildtools:native-maven-plugin](https://github.com/graalvm/native-build-tools) | build | patch | `0.11.3` → `0.11.5` | | [org.apache.maven.plugins:maven-resources-plugin](https://maven.apache.org/plugins/) ([source](https://github.com/apache/maven-resources-plugin)) | build | minor | `3.4.0` → `3.5.0` | | [org.apache.maven.plugins:maven-failsafe-plugin](https://maven.apache.org/surefire/) ([source](https://github.com/apache/maven-surefire)) | build | patch | `3.5.4` → `3.5.5` | | [org.apache.maven.plugins:maven-compiler-plugin](https://maven.apache.org/plugins/) ([source](https://github.com/apache/maven-compiler-plugin)) | build | minor | `3.14.1` → `3.15.0` | | [com.github.loki4j:loki-logback-appender](https://github.com/loki4j/loki-logback-appender) | compile | patch | `2.0.1` → `2.0.3` | | [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck.git) ([source](https://github.com/dependency-check/DependencyCheck/tree/HEAD/maven)) | build | minor | `12.1.9` → `12.2.0` | | [com.puppycrawl.tools:checkstyle](https://checkstyle.org/) ([source](https://github.com/checkstyle/checkstyle)) | build | minor | `12.2.0` → `12.3.1` | | [org.springframework.cloud:spring-cloud-dependencies](https://spring.io/projects/spring-cloud) ([source](https://github.com/spring-cloud/spring-cloud-release)) | import | minor | `2025.0.0` → `2025.1.1` | | [org.springframework.boot:spring-boot-maven-plugin](https://spring.io/projects/spring-boot) ([source](https://github.com/spring-projects/spring-boot)) | build | patch | `3.5.8` → `3.5.11` | | [org.springframework.boot:spring-boot-dependencies](https://spring.io/projects/spring-boot) ([source](https://github.com/spring-projects/spring-boot)) | import | patch | `3.5.8` → `3.5.11` | | [org.jetbrains.kotlin:kotlin-maven-plugin](https://kotlinlang.org/) ([source](https://github.com/JetBrains/kotlin)) | build | minor | `2.2.21` → `2.3.10` | --- ### Release Notes <details> <summary>graalvm/native-build-tools (org.graalvm.buildtools:native-maven-plugin)</summary> ### [`v0.11.5`](https://github.com/graalvm/native-build-tools/releases/tag/0.11.5) [Compare Source](https://github.com/graalvm/native-build-tools/compare/0.11.4...0.11.5) #### What's Changed - Bump version to 0.11.5-SNAPSHOT by [@&#8203;graalvmbot](https://github.com/graalvmbot) in [#&#8203;817](https://github.com/graalvm/native-build-tools/pull/817) - Make environment variables set in the pom.xml of the native-maven-plugin be visible in the image builder by [@&#8203;jormundur00](https://github.com/jormundur00) in [#&#8203;819](https://github.com/graalvm/native-build-tools/pull/819) - Add check if correct schemas are present in the reachability metadata repository provided to buildtools by [@&#8203;jormundur00](https://github.com/jormundur00) in [#&#8203;821](https://github.com/graalvm/native-build-tools/pull/821) - Add fallback for jarless artifacts in the native-maven-plugin by [@&#8203;jormundur00](https://github.com/jormundur00) in [#&#8203;824](https://github.com/graalvm/native-build-tools/pull/824) - Fix JUnit 6 not working correctly with JDK 21 by expanding the initialize-at-build-time-list by [@&#8203;jormundur00](https://github.com/jormundur00) in [#&#8203;832](https://github.com/graalvm/native-build-tools/pull/832) - Remove the usage of the global metadata/index.json from the nbt plugins by [@&#8203;jormundur00](https://github.com/jormundur00) in [#&#8203;829](https://github.com/graalvm/native-build-tools/pull/829) - Revert "Remove the usage of the global metadata/index.json from the nbt plugins" by [@&#8203;jormundur00](https://github.com/jormundur00) in [#&#8203;836](https://github.com/graalvm/native-build-tools/pull/836) - Use JDK 21 Graal in the CI by [@&#8203;jormundur00](https://github.com/jormundur00) in [#&#8203;839](https://github.com/graalvm/native-build-tools/pull/839) - Support `-H:+CompatibilityMode` in build tools by [@&#8203;vjovanov](https://github.com/vjovanov) in [#&#8203;822](https://github.com/graalvm/native-build-tools/pull/822) - Update reachability metadata to 0.3.34 by [@&#8203;graalvmbot](https://github.com/graalvmbot) in [#&#8203;842](https://github.com/graalvm/native-build-tools/pull/842) **Full Changelog**: <https://github.com/graalvm/native-build-tools/compare/0.11.4...0.11.5> ### [`v0.11.4`](https://github.com/graalvm/native-build-tools/releases/tag/0.11.4) [Compare Source](https://github.com/graalvm/native-build-tools/compare/0.11.3...0.11.4) #### What's Changed - Release 0.11.3 by [@&#8203;graalvmbot](https://github.com/graalvmbot) in [#&#8203;797](https://github.com/graalvm/native-build-tools/pull/797) - Bump version to 0.11.4-SNAPSHOT by [@&#8203;graalvmbot](https://github.com/graalvmbot) in [#&#8203;799](https://github.com/graalvm/native-build-tools/pull/799) - Generate dynamic access metadata and provide it to the classpath when passing "--emit build-report" as a build argument by [@&#8203;jormundur00](https://github.com/jormundur00) in [#&#8203;795](https://github.com/graalvm/native-build-tools/pull/795) - Fix relativlization bug by [@&#8203;melix](https://github.com/melix) in [#&#8203;792](https://github.com/graalvm/native-build-tools/pull/792) - Fix wrong property name in the maven plugin documentation by [@&#8203;jormundur00](https://github.com/jormundur00) in [#&#8203;808](https://github.com/graalvm/native-build-tools/pull/808) - Enhance Project Documentation and Testing by [@&#8203;vjovanov](https://github.com/vjovanov) in [#&#8203;791](https://github.com/graalvm/native-build-tools/pull/791) - Support compatibility mode in GraalVM by [@&#8203;vjovanov](https://github.com/vjovanov) in [#&#8203;811](https://github.com/graalvm/native-build-tools/pull/811) - Update reachability metadata to 0.3.33 by [@&#8203;graalvmbot](https://github.com/graalvmbot) in [#&#8203;814](https://github.com/graalvm/native-build-tools/pull/814) - Release 0.11.4 by [@&#8203;graalvmbot](https://github.com/graalvmbot) in [#&#8203;815](https://github.com/graalvm/native-build-tools/pull/815) #### New Contributors - [@&#8203;jormundur00](https://github.com/jormundur00) made their first contribution in [#&#8203;795](https://github.com/graalvm/native-build-tools/pull/795) **Full Changelog**: <https://github.com/graalvm/native-build-tools/compare/0.11.3...0.11.4> </details> <details> <summary>loki4j/loki-logback-appender (com.github.loki4j:loki-logback-appender)</summary> ### [`v2.0.3`](https://github.com/loki4j/loki-logback-appender/releases/tag/v2.0.3) [Compare Source](https://github.com/loki4j/loki-logback-appender/compare/v2.0.2...v2.0.3) #### Bug fixes [#&#8203;330](https://github.com/loki4j/loki-logback-appender/issues/330) Security: Upgrade logback-classic to 1.5.25 (by [@&#8203;novakma2](https://github.com/novakma2)) #### Misc [#&#8203;331](https://github.com/loki4j/loki-logback-appender/issues/331) Dependencies upgraded [#&#8203;332](https://github.com/loki4j/loki-logback-appender/issues/332) Switch integration test from Loki 3.5.4 to Loki 3.6.4 ### [`v2.0.2`](https://github.com/loki4j/loki-logback-appender/releases/tag/v2.0.2) [Compare Source](https://github.com/loki4j/loki-logback-appender/compare/v2.0.1...v2.0.2) #### Bug fixes [#&#8203;325](https://github.com/loki4j/loki-logback-appender/issues/325) Add UTF-8 encoding support to RawJsonString </details> <details> <summary>dependency-check/DependencyCheck (org.owasp:dependency-check-maven)</summary> ### [`v12.2.0`](https://github.com/dependency-check/DependencyCheck/blob/HEAD/CHANGELOG.md#Version-1220-2026-01-09) [Compare Source](https://github.com/dependency-check/DependencyCheck/compare/v12.1.9...v12.2.0) - feat: package and utilize generated suppression file ([#&#8203;8116](https://github.com/dependency-check/DependencyCheck/pull/8116)) - feat: override pnpm audit registry parameter ([#&#8203;8158](https://github.com/dependency-check/DependencyCheck/pull/8158)) - feat: support multiple cvssBelow thresholds per version ([#&#8203;2563](https://github.com/dependency-check/DependencyCheck/pull/2563)) ([#&#8203;8024](https://github.com/dependency-check/DependencyCheck/pull/8024)) - feat: usage telemetry via scarf ([#&#8203;8066](https://github.com/dependency-check/DependencyCheck/pull/8066)) - feat: add new suppression xsd allowing grouping of suppressions ([#&#8203;7957](https://github.com/dependency-check/DependencyCheck/pull/7957)) - fix(ant): resolve relative paths against basedir ([#&#8203;8202](https://github.com/dependency-check/DependencyCheck/pull/8202)) - fix: add hint for Elastic APM Java agent CPE mapping ([#&#8203;8200](https://github.com/dependency-check/DependencyCheck/pull/8200)) - fix: Allow NVD data feed metadata downloads to fail on 1st Jan while logging correct errors ([#&#8203;8205](https://github.com/dependency-check/DependencyCheck/pull/8205)) - fix(ant): resolve paths relative to basedir for suppression and output - fix: correct XML/JSON report CVSS field & HTML report URL mappings ([#&#8203;8156](https://github.com/dependency-check/DependencyCheck/pull/8156)) - fix: log GrokAssembly output when dotnet invocation fails ([#&#8203;8141](https://github.com/dependency-check/DependencyCheck/pull/8141)) - fix: correct reliability of Central etc (JCS cache) analyzers on Java 25/Docker by making CLI classpath deterministic ([#&#8203;8117](https://github.com/dependency-check/DependencyCheck/pull/8117)) - docs: Update & correct README ([#&#8203;8166](https://github.com/dependency-check/DependencyCheck/pull/8166)) - docs: update suppression schema version ([#&#8203;8136](https://github.com/dependency-check/DependencyCheck/pull/8136)) - docs: fix typos in some files ([#&#8203;8135](https://github.com/dependency-check/DependencyCheck/pull/8135)) - chore: remove duplicate suppression rules from base that are in the generated branch ([#&#8203;8138](https://github.com/dependency-check/DependencyCheck/pull/8138)) - chore: remove suppression rules that were deleted from the generatedSuppression branch ([#&#8203;8119](https://github.com/dependency-check/DependencyCheck/pull/8119)) - build: transition dependency to `org.eclipse.parsson` groupId ([#&#8203;8128](https://github.com/dependency-check/DependencyCheck/pull/8128)) - See the full listing of [changes](https://github.com/dependency-check/DependencyCheck/milestone/103?closed=1) </details> <details> <summary>spring-cloud/spring-cloud-release (org.springframework.cloud:spring-cloud-dependencies)</summary> ### [`v2025.1.1`](https://github.com/spring-cloud/spring-cloud-release/releases/tag/v2025.1.1) [Compare Source](https://github.com/spring-cloud/spring-cloud-release/compare/v2025.1.0...v2025.1.1) #### What's Changed - Bump antora from 3.2.0-alpha.10 to 3.2.0-alpha.11 in /docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;447](https://github.com/spring-cloud/spring-cloud-release/pull/447) - Bump org.springframework.cloud:spring-cloud-contract-dependencies from 5.0.1-SNAPSHOT to 5.0.2-SNAPSHOT by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;454](https://github.com/spring-cloud/spring-cloud-release/pull/454) - Bump org.springframework.cloud:spring-cloud-contract-dependencies from 5.0.1-SNAPSHOT to 5.0.2-SNAPSHOT by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;453](https://github.com/spring-cloud/spring-cloud-release/pull/453) - Bump actions/cache from 4 to 5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;456](https://github.com/spring-cloud/spring-cloud-release/pull/456) - Bump org.apache.maven:maven-model from 3.9.11 to 3.9.12 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;461](https://github.com/spring-cloud/spring-cloud-release/pull/461) - Bump org.apache.maven:maven-model from 3.9.11 to 3.9.12 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;460](https://github.com/spring-cloud/spring-cloud-release/pull/460) **Full Changelog**: <https://github.com/spring-cloud/spring-cloud-release/compare/v2025.1.0...v2025.1.1> ### [`v2025.1.0`](https://github.com/spring-cloud/spring-cloud-release/compare/v2025.0.1...v2025.1.0) [Compare Source](https://github.com/spring-cloud/spring-cloud-release/compare/v2025.0.1...v2025.1.0) ### [`v2025.0.1`](https://github.com/spring-cloud/spring-cloud-release/compare/v2025.0.0...v2025.0.1) [Compare Source](https://github.com/spring-cloud/spring-cloud-release/compare/v2025.0.0...v2025.0.1) </details> <details> <summary>spring-projects/spring-boot (org.springframework.boot:spring-boot-maven-plugin)</summary> ### [`v3.5.11`](https://github.com/spring-projects/spring-boot/releases/tag/v3.5.11) [Compare Source](https://github.com/spring-projects/spring-boot/compare/v3.5.10...v3.5.11) ##### :lady\_beetle: Bug Fixes - Whitespace can be incorrectly removed when spring-boot-configuration-processor runs on multi-line javadoc [#&#8203;49039](https://github.com/spring-projects/spring-boot/pull/49039) - server.jetty.threads.max is ignored when using virtual threads [#&#8203;48982](https://github.com/spring-projects/spring-boot/issues/48982) - Docker credential helpers with file extensions cannot be executed on Windows [#&#8203;48965](https://github.com/spring-projects/spring-boot/pull/48965) ##### :notebook\_with\_decorative\_cover: Documentation - Couchbase and Kafka are incorrectly listed as supporting SSL with Docker Compose [#&#8203;49211](https://github.com/spring-projects/spring-boot/issues/49211) - Document that use of non idiomatic format for '`@Value`' still apply for environment variables [#&#8203;49054](https://github.com/spring-projects/spring-boot/pull/49054) - Document naming convention for custom test-scoped starters [#&#8203;49014](https://github.com/spring-projects/spring-boot/pull/49014) - LICENSE.txt and NOTICE.txt files have the wrong content in the latest releases [#&#8203;48996](https://github.com/spring-projects/spring-boot/issues/48996) - ApplicationContextAssert documents a non-existent assertion in getFailure() [#&#8203;48973](https://github.com/spring-projects/spring-boot/pull/48973) - Highlight the importance of the preStop hook when configuring Kubernetes probes [#&#8203;48936](https://github.com/spring-projects/spring-boot/pull/48936) ##### :hammer: Dependency Upgrades - Upgrade to AssertJ 3.27.7 [#&#8203;49075](https://github.com/spring-projects/spring-boot/issues/49075) - Upgrade to Groovy 4.0.30 [#&#8203;49076](https://github.com/spring-projects/spring-boot/issues/49076) - Upgrade to Hibernate 6.6.42.Final [#&#8203;49077](https://github.com/spring-projects/spring-boot/issues/49077) - Upgrade to Jaybird 6.0.4 [#&#8203;49078](https://github.com/spring-projects/spring-boot/issues/49078) - Upgrade to JBoss Logging 3.6.2.Final [#&#8203;49079](https://github.com/spring-projects/spring-boot/issues/49079) - Upgrade to Jetty 12.0.32 [#&#8203;49080](https://github.com/spring-projects/spring-boot/issues/49080) - Upgrade to jOOQ 3.19.30 [#&#8203;49081](https://github.com/spring-projects/spring-boot/issues/49081) - Upgrade to Logback 1.5.32 [#&#8203;49243](https://github.com/spring-projects/spring-boot/issues/49243) - Upgrade to Micrometer 1.15.9 [#&#8203;49064](https://github.com/spring-projects/spring-boot/issues/49064) - Upgrade to Micrometer Tracing 1.5.9 [#&#8203;49065](https://github.com/spring-projects/spring-boot/issues/49065) - Upgrade to MySQL 9.6.0 [#&#8203;49083](https://github.com/spring-projects/spring-boot/issues/49083) - Upgrade to Netty 4.1.131.Final [#&#8203;49165](https://github.com/spring-projects/spring-boot/issues/49165) - Upgrade to Postgresql 42.7.10 [#&#8203;49201](https://github.com/spring-projects/spring-boot/issues/49201) - Upgrade to Reactor Bom 2024.0.15 [#&#8203;49066](https://github.com/spring-projects/spring-boot/issues/49066) - Upgrade to Spring Authorization Server 1.5.6 [#&#8203;49067](https://github.com/spring-projects/spring-boot/issues/49067) - Upgrade to Spring Data Bom 2025.0.9 [#&#8203;49068](https://github.com/spring-projects/spring-boot/issues/49068) - Upgrade to Spring Framework 6.2.16 [#&#8203;49069](https://github.com/spring-projects/spring-boot/issues/49069) - Upgrade to Spring GraphQL 1.4.5 [#&#8203;49070](https://github.com/spring-projects/spring-boot/issues/49070) - Upgrade to Spring Integration 6.5.7 [#&#8203;49071](https://github.com/spring-projects/spring-boot/issues/49071) - Upgrade to Spring Kafka 3.3.13 [#&#8203;49244](https://github.com/spring-projects/spring-boot/issues/49244) - Upgrade to Spring LDAP 3.3.6 [#&#8203;49072](https://github.com/spring-projects/spring-boot/issues/49072) - Upgrade to Spring Pulsar 1.2.15 [#&#8203;49073](https://github.com/spring-projects/spring-boot/issues/49073) - Upgrade to Spring Security 6.5.8 [#&#8203;49225](https://github.com/spring-projects/spring-boot/issues/49225) - Upgrade to Spring Session 3.5.5 [#&#8203;49074](https://github.com/spring-projects/spring-boot/issues/49074) - Upgrade to Tomcat 10.1.52 [#&#8203;49084](https://github.com/spring-projects/spring-boot/issues/49084) - Upgrade to Undertow 2.3.23.Final [#&#8203;49166](https://github.com/spring-projects/spring-boot/issues/49166) ##### :heart: Contributors Thank you to all the contributors who worked on this release: [@&#8203;dsyer](https://github.com/dsyer), [@&#8203;linkian209](https://github.com/linkian209), [@&#8203;nosan](https://github.com/nosan), [@&#8203;quaff](https://github.com/quaff), [@&#8203;scordio](https://github.com/scordio), and [@&#8203;srt](https://github.com/srt) ### [`v3.5.10`](https://github.com/spring-projects/spring-boot/releases/tag/v3.5.10) [Compare Source](https://github.com/spring-projects/spring-boot/compare/v3.5.9...v3.5.10) ##### :lady\_beetle: Bug Fixes - Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present [#&#8203;48836](https://github.com/spring-projects/spring-boot/issues/48836) - When a bean condition references a type that is not present, it appears as ? in the condition evaluation report [#&#8203;48835](https://github.com/spring-projects/spring-boot/issues/48835) - Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) [#&#8203;48810](https://github.com/spring-projects/spring-boot/issues/48810) - DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image [#&#8203;48702](https://github.com/spring-projects/spring-boot/issues/48702) - Application JAR created by extract command is not reproductible [#&#8203;48664](https://github.com/spring-projects/spring-boot/issues/48664) - AOT processing of tests should not be disabled when 'skipTests' is set [#&#8203;48661](https://github.com/spring-projects/spring-boot/issues/48661) - Fix zero-length byte buffer in InspectedContent [#&#8203;48649](https://github.com/spring-projects/spring-boot/pull/48649) ##### :notebook\_with\_decorative\_cover: Documentation - Update documentation for Buildpack's AOT Cache support [#&#8203;48768](https://github.com/spring-projects/spring-boot/issues/48768) - Document support for configuring arguments passed to Docker Compose [#&#8203;48657](https://github.com/spring-projects/spring-boot/issues/48657) - Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file [#&#8203;48634](https://github.com/spring-projects/spring-boot/issues/48634) - Fix grammar and typos in the reference guide [#&#8203;48596](https://github.com/spring-projects/spring-boot/pull/48596) ##### :hammer: Dependency Upgrades - Upgrade to Classmate 1.7.3 [#&#8203;48775](https://github.com/spring-projects/spring-boot/issues/48775) - Upgrade to Hibernate 6.6.41.Final [#&#8203;48881](https://github.com/spring-projects/spring-boot/issues/48881) - Upgrade to HttpClient5 5.5.2 [#&#8203;48777](https://github.com/spring-projects/spring-boot/issues/48777) - Upgrade to Logback 1.5.25 [#&#8203;48882](https://github.com/spring-projects/spring-boot/issues/48882) - Upgrade to Micrometer 1.15.8 [#&#8203;48705](https://github.com/spring-projects/spring-boot/issues/48705) - Upgrade to Micrometer Tracing 1.5.8 [#&#8203;48706](https://github.com/spring-projects/spring-boot/issues/48706) - Upgrade to Pooled JMS 3.1.9 [#&#8203;48779](https://github.com/spring-projects/spring-boot/issues/48779) - Upgrade to Postgresql 42.7.9 [#&#8203;48883](https://github.com/spring-projects/spring-boot/issues/48883) - Upgrade to R2DBC MSSQL 1.0.4.RELEASE [#&#8203;48847](https://github.com/spring-projects/spring-boot/issues/48847) - Upgrade to Reactor Bom 2024.0.14 [#&#8203;48707](https://github.com/spring-projects/spring-boot/issues/48707) - Upgrade to REST Assured 5.5.7 [#&#8203;48884](https://github.com/spring-projects/spring-boot/issues/48884) - Upgrade to Spring AMQP 3.2.9 [#&#8203;48909](https://github.com/spring-projects/spring-boot/issues/48909) - Upgrade to Spring Data Bom 2025.0.8 [#&#8203;48708](https://github.com/spring-projects/spring-boot/issues/48708) - Upgrade to Spring Integration 6.5.6 [#&#8203;48921](https://github.com/spring-projects/spring-boot/issues/48921) - Upgrade to Spring Kafka 3.3.12 [#&#8203;48709](https://github.com/spring-projects/spring-boot/issues/48709) - Upgrade to Spring Pulsar 1.2.14 [#&#8203;48710](https://github.com/spring-projects/spring-boot/issues/48710) - Upgrade to Undertow 2.3.22.Final [#&#8203;48848](https://github.com/spring-projects/spring-boot/issues/48848) - Upgrade to WebJars Locator Lite 1.1.3 [#&#8203;48780](https://github.com/spring-projects/spring-boot/issues/48780) ##### :heart: Contributors Thank you to all the contributors who worked on this release: [@&#8203;GaoSSR](https://github.com/GaoSSR), [@&#8203;izeye](https://github.com/izeye), and [@&#8203;ngocnhan-tran1996](https://github.com/ngocnhan-tran1996) ### [`v3.5.9`](https://github.com/spring-projects/spring-boot/releases/tag/v3.5.9) [Compare Source](https://github.com/spring-projects/spring-boot/compare/v3.5.8...v3.5.9) ##### :lady\_beetle: Bug Fixes - RabbitHealthIndicator reports an error when version is missing from the connection's server properties [#&#8203;48486](https://github.com/spring-projects/spring-boot/issues/48486) - Profiles retained during AOT processing are not configured in a native image [#&#8203;48475](https://github.com/spring-projects/spring-boot/issues/48475) - NullPointerException in UndertowWebServer.destroy() when using `@DirtiesContext` and Citrus Spring Boot Simulator [#&#8203;48450](https://github.com/spring-projects/spring-boot/issues/48450) - Redis health check reports an error when redis\_version is missing from the INFO response [#&#8203;48326](https://github.com/spring-projects/spring-boot/issues/48326) - Parent's MeterRegistry beans are closed when child context closes [#&#8203;48324](https://github.com/spring-projects/spring-boot/issues/48324) - SpringBootTest.UseMainMethod.WHEN\_AVAILABLE and ALWAYS are incompatible with package-private or parameter-less main method [#&#8203;48271](https://github.com/spring-projects/spring-boot/issues/48271) ##### :notebook\_with\_decorative\_cover: Documentation - Documentation has an outdated reference to the Jackson Kotlin Module [#&#8203;48533](https://github.com/spring-projects/spring-boot/issues/48533) - Caching documentation should clarify how to use a no-op implementation to run a test suite [#&#8203;48531](https://github.com/spring-projects/spring-boot/issues/48531) - Document that the default rolling policy for Log4j2 requires logging.file.path to be set [#&#8203;48526](https://github.com/spring-projects/spring-boot/issues/48526) - License header in build samples is displayed in the reference documentation [#&#8203;48477](https://github.com/spring-projects/spring-boot/issues/48477) - Configuring Two DataSources How-To code sample is inconsistent [#&#8203;48448](https://github.com/spring-projects/spring-boot/issues/48448) - Improve javadoc for when to use class names rather than class references [#&#8203;48395](https://github.com/spring-projects/spring-boot/issues/48395) - Document that org.aspectj.weaver.Advice must be on the classpath to enable support for Micrometer's annotations [#&#8203;48359](https://github.com/spring-projects/spring-boot/issues/48359) - Polish TestRestTemplate examples in the reference guide [#&#8203;48335](https://github.com/spring-projects/spring-boot/issues/48335) - Fix links to javadoc in the reference documentation [#&#8203;48299](https://github.com/spring-projects/spring-boot/issues/48299) - Clarify that `@EnableBatchProcessing` turns off all batch auto-configuration, including schema initialization [#&#8203;48265](https://github.com/spring-projects/spring-boot/issues/48265) - Kotlin auto-configuration examples are not annotated with `@AutoConfiguration` [#&#8203;48227](https://github.com/spring-projects/spring-boot/issues/48227) - Infinispan Cache Documentation is outdated [#&#8203;48217](https://github.com/spring-projects/spring-boot/issues/48217) - Revise "Use Liquibase for test-only migrations" section in reference manual [#&#8203;48169](https://github.com/spring-projects/spring-boot/pull/48169) ##### :hammer: Dependency Upgrades - Prevent upgrade to Netty 4.1.129.Final [#&#8203;48508](https://github.com/spring-projects/spring-boot/issues/48508) - Upgrade to AspectJ 1.9.25.1 [#&#8203;48557](https://github.com/spring-projects/spring-boot/issues/48557) - Upgrade to Hibernate 6.6.39.Final [#&#8203;48540](https://github.com/spring-projects/spring-boot/issues/48540) - Upgrade to Jetty 12.0.31 [#&#8203;48455](https://github.com/spring-projects/spring-boot/issues/48455) - Upgrade to jOOQ 3.19.29 [#&#8203;48456](https://github.com/spring-projects/spring-boot/issues/48456) - Upgrade to Logback 1.5.22 [#&#8203;48507](https://github.com/spring-projects/spring-boot/issues/48507) - Upgrade to MariaDB 3.5.7 [#&#8203;48558](https://github.com/spring-projects/spring-boot/issues/48558) - Upgrade to Micrometer 1.15.7 [#&#8203;48423](https://github.com/spring-projects/spring-boot/issues/48423) - Upgrade to Micrometer Tracing 1.5.7 [#&#8203;48424](https://github.com/spring-projects/spring-boot/issues/48424) - Upgrade to Netty 4.1.130.Final [#&#8203;48541](https://github.com/spring-projects/spring-boot/issues/48541) - Upgrade to Pooled JMS 3.1.8 [#&#8203;48559](https://github.com/spring-projects/spring-boot/issues/48559) - Upgrade to Pulsar 4.0.8 [#&#8203;48457](https://github.com/spring-projects/spring-boot/issues/48457) - Upgrade to Quartz 2.5.2 [#&#8203;48458](https://github.com/spring-projects/spring-boot/issues/48458) - Upgrade to Reactor Bom 2024.0.13 [#&#8203;48425](https://github.com/spring-projects/spring-boot/issues/48425) - Upgrade to Spring Authorization Server 1.5.5 [#&#8203;48426](https://github.com/spring-projects/spring-boot/issues/48426) - Upgrade to Spring Data Bom 2025.0.7 [#&#8203;48427](https://github.com/spring-projects/spring-boot/issues/48427) - Upgrade to Spring Framework 6.2.15 [#&#8203;48428](https://github.com/spring-projects/spring-boot/issues/48428) - Upgrade to Spring GraphQL 1.4.4 [#&#8203;48429](https://github.com/spring-projects/spring-boot/issues/48429) - Upgrade to Spring Integration 6.5.5 [#&#8203;48560](https://github.com/spring-projects/spring-boot/issues/48560) - Upgrade to Spring LDAP 3.3.5 [#&#8203;48430](https://github.com/spring-projects/spring-boot/issues/48430) - Upgrade to Spring Pulsar 1.2.13 [#&#8203;48431](https://github.com/spring-projects/spring-boot/issues/48431) - Upgrade to Spring Session 3.5.4 [#&#8203;48432](https://github.com/spring-projects/spring-boot/issues/48432) - Upgrade to Testcontainers 1.21.4 [#&#8203;48542](https://github.com/spring-projects/spring-boot/issues/48542) - Upgrade to UnboundID LDAPSDK 7.0.4 [#&#8203;48459](https://github.com/spring-projects/spring-boot/issues/48459) ##### :heart: Contributors Thank you to all the contributors who worked on this release: [@&#8203;banseok1216](https://github.com/banseok1216), [@&#8203;berry120](https://github.com/berry120), [@&#8203;dmitrysulman](https://github.com/dmitrysulman), [@&#8203;geopark021](https://github.com/geopark021), [@&#8203;noojung](https://github.com/noojung), [@&#8203;scottfrederick](https://github.com/scottfrederick), [@&#8203;vpavic](https://github.com/vpavic), and [@&#8203;youngledo](https://github.com/youngledo) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41Mi40IiwidXBkYXRlZEluVmVyIjoiNDMuODkuOCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->
Owner

This PR contains the following updates:

Package Type Update Change com.puppycrawl.tools:checkstyle ( https://checkstyle.org/ ) ( source ( https://github.com/checkstyle/checkstyle ) ) build minor 12.2.0 -> 12.3.0 org.springframework.cloud:spring-cloud-dependencies ( https://spring.io/projects/spring-cloud ) ( source ( https://github.com/spring-cloud/spring-cloud-release ) ) import minor 2025.0.0 -> 2025.1.0

Release Notes

This PR contains the following updates: Package Type Update Change com.puppycrawl.tools:checkstyle ( https://checkstyle.org/ ) ( source ( https://github.com/checkstyle/checkstyle ) ) build minor 12.2.0 -> 12.3.0 org.springframework.cloud:spring-cloud-dependencies ( https://spring.io/projects/spring-cloud ) ( source ( https://github.com/spring-cloud/spring-cloud-release ) ) import minor 2025.0.0 -> 2025.1.0 Release Notes
renovatebot force-pushed renovate/all-minor-patch from ee87668fbf
All checks were successful
SonarQube Scan / SonarQube Trigger (pull_request) Successful in 1m20s
to ab1ac980c0
All checks were successful
SonarQube Scan / SonarQube Trigger (pull_request) Successful in 1m25s
2025-12-16 15:03:15 +01:00
Compare
renovatebot force-pushed renovate/all-minor-patch from ab1ac980c0
All checks were successful
SonarQube Scan / SonarQube Trigger (pull_request) Successful in 1m25s
to 40b39af303
All checks were successful
SonarQube Scan / SonarQube Trigger (pull_request) Successful in 1m31s
2025-12-18 19:01:41 +01:00
Compare
renovatebot force-pushed renovate/all-minor-patch from 40b39af303
All checks were successful
SonarQube Scan / SonarQube Trigger (pull_request) Successful in 1m31s
to c86cc9d9e8
All checks were successful
SonarQube Scan / SonarQube Trigger (pull_request) Successful in 1m12s
2025-12-20 21:01:25 +01:00
Compare
renovatebot force-pushed renovate/all-minor-patch from c86cc9d9e8
All checks were successful
SonarQube Scan / SonarQube Trigger (pull_request) Successful in 1m12s
to 36ea27d885
All checks were successful
SonarQube Scan / SonarQube Trigger (pull_request) Successful in 3m16s
2026-01-01 05:01:39 +01:00
Compare
renovatebot force-pushed renovate/all-minor-patch from 36ea27d885
All checks were successful
SonarQube Scan / SonarQube Trigger (pull_request) Successful in 3m16s
to 3723a62781
All checks were successful
SonarQube Scan / SonarQube Trigger (pull_request) Successful in 2m24s
2026-01-12 19:02:48 +01:00
Compare
renovatebot force-pushed renovate/all-minor-patch from 3723a62781
All checks were successful
SonarQube Scan / SonarQube Trigger (pull_request) Successful in 2m24s
to 885f565033
All checks were successful
SonarQube Scan / SonarQube Trigger (pull_request) Successful in 2m29s
2026-01-24 09:12:51 +01:00
Compare
renovatebot force-pushed renovate/all-minor-patch from 885f565033
All checks were successful
SonarQube Scan / SonarQube Trigger (pull_request) Successful in 2m29s
to 28dd917b93
Some checks failed
SonarQube Scan / SonarQube Trigger (pull_request) Failing after 2m13s
2026-02-09 19:11:14 +01:00
Compare
renovatebot force-pushed renovate/all-minor-patch from 28dd917b93
Some checks failed
SonarQube Scan / SonarQube Trigger (pull_request) Failing after 2m13s
to 5300fc1995
Some checks failed
SonarQube Scan / SonarQube Trigger (pull_request) Failing after 2m31s
2026-02-20 01:10:10 +01:00
Compare
renovatebot force-pushed renovate/all-minor-patch from 5300fc1995
Some checks failed
SonarQube Scan / SonarQube Trigger (pull_request) Failing after 2m31s
to 20e27b9ebc
Some checks failed
SonarQube Scan / SonarQube Trigger (pull_request) Failing after 2m34s
2026-02-22 03:09:16 +01:00
Compare
renovatebot force-pushed renovate/all-minor-patch from 20e27b9ebc
Some checks failed
SonarQube Scan / SonarQube Trigger (pull_request) Failing after 2m34s
to 2af045f52e
Some checks failed
SonarQube Scan / SonarQube Trigger (pull_request) Failing after 20s
2026-03-05 01:12:43 +01:00
Compare
renovatebot force-pushed renovate/all-minor-patch from 2af045f52e
Some checks failed
SonarQube Scan / SonarQube Trigger (pull_request) Failing after 20s
to 194438d4a3
Some checks failed
SonarQube Scan / SonarQube Trigger (pull_request) Failing after 20s
2026-03-07 09:12:32 +01:00
Compare
Some checks failed
SonarQube Scan / SonarQube Trigger (pull_request) Failing after 20s
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/all-minor-patch:renovate/all-minor-patch
git switch renovate/all-minor-patch

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/all-minor-patch
git switch renovate/all-minor-patch
git rebase main
git switch main
git merge --ff-only renovate/all-minor-patch
git switch renovate/all-minor-patch
git rebase main
git switch main
git merge --no-ff renovate/all-minor-patch
git switch main
git merge --squash renovate/all-minor-patch
git switch main
git merge --ff-only renovate/all-minor-patch
git switch main
git merge renovate/all-minor-patch
git push origin main
Sign in to join this conversation.
No reviewers
No labels
released
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
pom/spring-boot-starter!36
No description provided.